Firewalls that Support Per Program Rules (Exceptions)

[sbeadle1]

📖 Home  Back  
Firewalls that support per program rules can be configured to unblock those ClearSCADA programs that require network access. Most firewalls allow you to configure the scope of the rules to determine whether incoming and/or outgoing connections are blocked. They also allow you to configure the source and/or destination of the connections. For example, you can configure a firewall to limit which client computers can connect to a server.

It is quick and easy to make an exception rule for a program. However, a malicious program may be able to impersonate the program to gain access to the network.

Although it is possible to use firewalls that support per program rules, we recommend that you configure your firewall(s) to unblock the ports shown in Network Ports used by ClearSCADA and Firewall Configuration to Allow Client - Server Comms.

The files for the ClearSCADA programs are located in the installation folder.

The ClearSCADA programs that require network access are:

• DBServer.exe - Database server service

• Driver.exe - Drivers (one program per driver)

• ViewX.exe - ViewX client application.

• ServerStatus.exe - Server status tool

• ServerConfig.exe - Server configuration tool

• AEPrinter.exe - OPC alarm and event printer service

• LicenceServer.exe - Licence server service

• PortServer.exe - Port server service

• ScxCmd.exe - Command line tool

When using firewalls that support per program rules, you may need to update the firewall rules whenever there is an upgrade to any of the programs listed above. This is sometimes required as many firewalls allow access to a specific .exe file. During an upgrade, a new .exe file is installed that replaces the previous .exe file. In some cases, the firewall will detect that the .exe file has changed and so will block it until you change the firewall rules. Typically, the firewall will notify you that it has detected a change and prompt you to change its rules.

Go: Home Back